Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/eq-bW2MrtqurE-tZQ18UIcyPo7Y.roa
File:                     eq-bW2MrtqurE-tZQ18UIcyPo7Y.roa (raw, json)
Hash identifier:          87qwahTDef6UglfUzVQCLKEeLKwAuvNe3LRk5Vu53xo=
Subject key identifier:   7A:AF:9B:5B:63:2B:B6:AB:AB:13:EB:59:43:5F:14:21:CC:8F:A3:B6
Certificate issuer:       /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial:       015F05E3
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/eq-bW2MrtqurE-tZQ18UIcyPo7Y.roa
Signing time:             Sat 01 Jan 2022 01:00:31 +0000
ROA not before:           Sat 01 Jan 2022 01:00:31 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     213236
IP address blocks:        2a0c:b641:6c0::/44 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23004643 (0x15f05e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05976801363d375786152e4d061e75c8beb35058
        Validity
            Not Before: Jan  1 01:00:31 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=7aaf9b5b632bb6abab13eb59435f1421cc8fa3b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4c:50:fe:1d:ca:74:a1:19:d3:dd:a8:49:ee:
                    a8:ee:c5:48:89:72:c7:ad:ba:cd:fc:0a:7a:8d:30:
                    39:3b:a1:54:e8:d9:b8:3e:9d:66:e4:45:01:28:c1:
                    2f:dd:80:f7:6b:77:4a:95:53:78:56:31:9b:47:00:
                    09:44:e7:bf:81:01:df:cd:be:7d:22:45:e5:c9:f1:
                    eb:e0:b1:b8:0c:ff:3b:1a:d7:8d:c4:3e:e6:ba:b1:
                    a7:8b:1f:20:0e:04:9a:89:61:14:9b:b9:af:92:54:
                    da:7b:b6:c6:28:dc:73:54:bc:c3:b6:dd:bf:12:49:
                    d7:73:7e:80:b1:60:da:20:0f:58:e1:e9:7b:b8:c3:
                    db:5a:1e:b0:c7:01:1e:2d:71:5f:7d:7f:33:79:ce:
                    03:95:0a:7e:08:23:db:0d:16:a9:0f:4d:9f:6b:99:
                    34:c1:e0:ab:87:10:f7:50:c3:89:8c:9f:7c:96:74:
                    6c:16:ab:b9:7d:1f:6c:98:92:6a:ca:37:e1:ca:73:
                    7a:f2:2c:2d:17:61:2b:ae:74:58:e4:44:d6:01:1d:
                    d5:ac:84:e3:f7:fd:1d:c6:59:f1:4b:c6:24:b4:94:
                    39:7b:90:4c:c2:85:26:83:2a:4e:11:50:24:f2:52:
                    0f:9e:04:d7:26:54:b9:e3:6e:fb:dc:bd:c6:2e:c0:
                    01:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AF:9B:5B:63:2B:B6:AB:AB:13:EB:59:43:5F:14:21:CC:8F:A3:B6
            X509v3 Authority Key Identifier:
                keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/eq-bW2MrtqurE-tZQ18UIcyPo7Y.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0c:b641:6c0::/44

    Signature Algorithm: sha256WithRSAEncryption
         a0:dc:9f:c9:3c:e0:c5:12:04:33:6f:c2:1b:27:68:3f:8b:fe:
         d3:37:76:da:8f:c7:6c:33:b7:b2:78:61:50:77:e8:7e:3a:6d:
         f2:69:11:66:a6:18:b3:fb:fa:6a:99:ce:a1:a8:c2:f2:cb:29:
         22:f2:eb:2d:b0:e3:36:49:68:3f:e3:b8:30:bf:31:a3:4a:fc:
         90:72:e2:d1:1a:10:1a:24:fd:61:b7:71:7d:58:73:97:ec:15:
         38:57:4e:cb:06:0f:05:2b:d1:74:85:09:2e:88:5b:5d:a2:be:
         23:35:95:91:88:48:01:18:48:a4:ef:68:96:de:55:8a:87:cd:
         26:9e:fc:83:1c:e4:8a:0c:8b:a9:b0:a5:60:71:48:f5:30:d4:
         b3:dd:24:25:5f:65:d0:d6:52:fc:69:8d:15:22:b4:99:20:86:
         c9:be:89:97:ae:aa:04:aa:de:e7:f8:5c:8c:ab:c2:bf:fc:cd:
         03:88:92:91:e5:35:7f:f0:f4:b4:6e:81:ac:b4:79:73:96:97:
         98:aa:38:dd:e5:58:2e:12:72:3f:9e:e6:3d:ed:a3:4c:11:6e:
         28:7e:66:a2:f5:c3:6d:be:e1:e4:41:f7:9b:c5:dd:51:30:6a:
         b2:25:b5:f7:8b:d1:6a:f3:10:df:a7:49:59:61:f6:62:d1:54:
         a8:01:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----